Key Highlights
- Tether commits $147.5M recovery funding for Drift Protocol following a $280M security breach on April 1
- Hackers with North Korean connections masqueraded as a legitimate quantitative trading firm for half a year before launching the attack
- Drift Protocol will adopt Tether’s USDT as its primary settlement layer, replacing Circle’s USDC
- Circle received backlash for declining to freeze assets as $232M in USDC transferred through its proprietary bridge system
- The value of Drift’s governance token plummeted approximately 70% following the security incident
On April 1, Drift Protocol—a prominent decentralized exchange operating on Solana—suffered a devastating $280 million security breach. Tether has emerged with a comprehensive recovery strategy.
When the industry faces challenges, Tether steps up. 🛡️
We are leading an up to $150M recovery plan alongside the @SolanaFndn to support user recovery and safely relaunch @DriftProtocol
Watch the video to see how we’re protecting the community and expanding $USDT on Solana. 👇 pic.twitter.com/rlDrx1q7kt
— Tether (@tether) April 16, 2026
Tether heads a funding initiative totaling up to $147.5 million designed to restore user funds and revive the Drift platform. The stablecoin issuer provides $127.5 million, while anonymous partners contribute the remaining $20 million.
The financing operates as a revenue-linked credit arrangement, where a percentage of Drift’s trading income will accumulate in a recovery fund gradually. The ultimate objective involves repaying approximately $295 million in combined user damages.
Under this agreement, Drift will discontinue using Circle’s USDC for settlements and integrate Tether’s USDT instead. Tether additionally intends to provide discounted fees and enhanced liquidity assistance to market makers during the platform’s reemergence.
Drift ranks as the premier perpetual futures decentralized exchange on Solana, serving more than 175,000 users with approximately $150 billion in aggregate trading volume since its 2021 inception.
The Attack Timeline
The perpetrators maintained connections to North Korea. They adopted the identity of a quantitative trading operation and invested approximately six months establishing access within Drift prior to launching the exploit on April 1.
The attackers transferred approximately $232 million in USDC from Solana to Ethereum utilizing Circle’s proprietary Cross-Chain Transfer Protocol. The movement occurred through more than 100 separate transactions spanning six hours.
Blockchain analyst ZachXBT highlighted that Circle possessed an opportunity to intervene yet declined to freeze any assets throughout that period. Cryptocurrency industry leaders and security experts voiced strong criticism regarding Circle’s handling of the situation.
Update: $230M+ USDC bridged via CCTP from Solana to Ethereum across 100+ txns.
6 hours is how long Circle had to freeze stolen funds from the $280M+ Drift hack.
Circle is a centralized stablecoin issuer headquartered in New York and the attack began around 12 pm ET.
Why does… pic.twitter.com/v9OKxeOJHN
— ZachXBT (@zachxbt) April 2, 2026
Circle’s CEO Jeremy Allaire subsequently explained the company exclusively freezes USDC addresses when instructed by law enforcement agencies or judicial orders. He emphasized that independent action during a hack creates potential legal liabilities.
The value of Drift’s governance token declined approximately 70% after the exploit. Circle’s stock price also decreased about 10% on April 9 as criticism intensified, though the stock has since rebounded and currently trades roughly 20% above that nadir.
Intensifying Stablecoin Competition
The choice to substitute USDC with USDT places this situation squarely within the continuing competition between the two dominant stablecoins.
Tether’s USDT maintains substantial leadership, commanding approximately $185.5 billion in circulation versus Circle’s $78.6 by comparison. Circle had been making progress, with its transaction volume surpassing Tether’s during recent periods.
Tether maintains an established history of freezing addresses associated with security breaches and criminal operations, which has emerged as a significant differentiator following the Drift situation.
Drift announced that moving forward, the integration of USDT establishes the stablecoin as the foundation of its trading ecosystem throughout the recovery phase.
